Shipping containers at a logistics port with supply chain tracking data
Compliance Guides

Supply Chain Data for DPP: Get Your Suppliers On Board (2026)

PT
PassportCraft Team17 min read

Supply chain data collection is the biggest DPP compliance challenge. Here's how to get your suppliers to share the data your Digital Product Passport needs.

Supply chain data collection is the most expensive and time-consuming part of DPP compliance — not the technology, not the QR codes, not the platform fees. When the EU's Digital Product Passport requirements under the ESPR take effect for textiles (expected late 2028 or early 2029), brands will need verified data from every supplier in their chain: material composition, country of manufacture, chemical compliance, and eventually environmental footprint data. Most fashion supply chains are not set up to provide this. Getting your suppliers on board now — while the pressure is indirect, not mandatory — is the single highest-leverage preparation step you can take.

Why Is Supply Chain Data the Hardest Part of DPP?

A DPP platform can generate a QR code in seconds. Getting the data to put behind that QR code takes months. Here is why supply chain data is the bottleneck:

The Data Gap

The textile DPP under Regulation (EU) 2024/1781 (ESPR) is expected to require data across roughly 16 categories, according to the December 2025 textile preparatory study by the European Commission. The problem is that most of this data does not live inside your company — it lives with your suppliers, scattered across different tiers of the chain, in different formats (or no digital format at all). Here is where each category typically sits and how available that data tends to be today:

DPP Data CategoryWhere It Comes FromTypical Availability
Material compositionFabric supplier, spinning millOften approximate, especially for blended fabrics
Country of manufactureCMT factoryUsually known for final assembly; upstream often unclear
Chemical complianceDyehouse, finishing plantVaries widely — REACH-compliant brands have this; others do not
Substances of concernChemical supplier, testing labRequires testing or supplier declarations
Carbon footprintAll stages (raw material through retail)Rarely available; requires lifecycle assessment
Recycled contentFiber supplier, spinnerCertification exists (GRS, RCS) but penetration is low
Care instructionsProduct development teamBrands typically have this
Durability dataTesting labRequires standardized testing (pilling, abrasion, color fastness)

For the data categories your brand already controls (product identification, care instructions, brand details), DPP compliance is straightforward. For everything that depends on your supply chain, it is a supplier engagement project.

Why Suppliers Resist

Supplier resistance is not irrational. They face real concerns — and if you dismiss those concerns, you will get bad data or no data at all. A 2024 EURATEX survey found that most textile manufacturers, particularly small and mid-sized factories in Turkey, Bangladesh, and Vietnam, had little awareness of the ESPR or its data requirements. That means your DPP request may be the first time a supplier hears about this regulation. Understanding their objections is the first step to getting useful data:

  • Cost: Digitizing production data, installing tracking systems, and maintaining records costs money — and suppliers want to know who pays
  • Confidentiality: Detailed process data (chemical formulas, production methods, sourcing relationships) is commercially sensitive
  • Capacity: Many factories, especially in developing countries, lack the IT infrastructure for structured digital data exchange
  • Volume: A factory serving 50 brands faces 50 different data requests in 50 different formats
  • Uncertainty: The exact DPP requirements are not published yet — suppliers are reluctant to invest before knowing what is actually required

Your factory does not just supply you. A typical garment factory serves dozens of brands, each potentially asking for DPP data in a different format, at a different granularity level, with different deadlines. Industry-wide standards (via GS1 and CEN/CENELEC) will eventually standardize data exchange, but until then, the brands that make it easiest for suppliers to comply will get the best data first.

What Data Do You Need from Each Supplier Tier?

Based on the December 2025 textile preparatory study (commissioned by DG GROW under Regulation (EU) 2024/1781) and the ESPR framework, here is what your suppliers will need to provide — organized by which supplier in your chain holds the data.

From Your Tier 1 Supplier (Garment Factory)

Your Tier 1 supplier — the factory that assembles your finished garment — is the easiest starting point because you already have a direct commercial relationship with them. Most brands know their Tier 1 factories, and much of this data may already exist in your purchase orders, audit reports, or social compliance records. The challenge is not getting access; it is getting the data in a structured, digital format that maps to DPP fields rather than buried in PDF certificates or email attachments.

  • Country of final assembly
  • Manufacturing processes used (cutting, sewing, finishing)
  • Factory identification (name, location, GLN if available)
  • Quality control and compliance certifications

From Your Fabric Supplier

Your fabric supplier (sometimes called Tier 1.5 or Tier 2, depending on your chain structure) holds some of the most critical DPP data — particularly fiber composition and chemical compliance. This is where data collection gets harder, because many brands do not have direct contracts with their fabric mills. If your garment factory sources the fabric, you will need their cooperation to reach the mill. Start by asking your Tier 1 factory which mills they source from and whether they already collect material data sheets or test reports from those mills.

  • Fiber composition by weight (per ISO 2076)
  • Recycled content percentage (with certification reference)
  • Country of origin for fabrics
  • Dyeing and finishing processes
  • Chemical compliance documentation (REACH, SVHC declarations)

From Your Yarn or Fiber Supplier (Tier 2+)

This is the deepest tier most brands will need to reach during Phase 1 and Phase 2 traceability. Yarn spinners and fiber producers are often two or three steps removed from your brand, making direct engagement difficult. The most practical approach is to leverage existing certification chains: if your fabric carries a Global Recycled Standard (GRS) or Organic Content Standard (OCS) certificate, the upstream fiber data is already verified. Where certifications do not exist, your fabric supplier is your best intermediary for reaching these upstream partners.

  • Raw material origin
  • Fiber type certifications (organic, recycled)
  • Substances of concern at raw material stage

Environmental Data (Cross-Chain)

Environmental footprint data does not sit neatly at any single tier — it spans the entire chain, from raw material extraction through manufacturing, transport, and end-of-life. The European Commission is developing Product Environmental Footprint (PEF) category rules for textiles that will define the calculation methodology, but these are not finalized. In practice, most brands will rely on a mix of supplier-specific data (energy bills, water meters) and industry-average proxies from databases like Ecoinvent. The key is to start collecting what you can now and refine as methodology standards solidify.

  • Carbon footprint contribution per production stage
  • Water usage in wet processing
  • Energy consumption in manufacturing

This last category is the most difficult. Full lifecycle environmental data requires aggregation across your entire supply chain, and the methodology for calculating it has not been finalized. See our DPP data requirements guide for the complete list of expected data fields.

A Practical Supplier Engagement Strategy

Do not try to collect everything from everyone at once. A phased approach aligned with the regulatory timeline is more realistic and more effective.

Phase 1: Foundation (Now — Q2 2027)

Goal: Establish baseline data from Tier 1 suppliers for your top-selling products.

This phase is about low-hanging fruit and relationship building. You are not trying to build a complete digital traceability system — you are trying to document what you already know, identify what is missing, and start conversations with your most important suppliers before there is regulatory pressure. Focus on your top-selling SKUs first: if 20% of your products generate 80% of revenue, get those covered before worrying about deep catalog items. The effort here is organizational, not technical.

Actions:

  1. Map your supply chain — Document who makes what, where, for your top 20% of SKUs by revenue
  2. Audit existing data — You likely already have material composition, country of manufacture, and some chemical compliance data. Identify what is missing.
  3. Start the conversation — Inform your key suppliers that DPP data requirements are coming. Share the ESPR timeline so they understand this is an EU regulation, not your idea.
  4. Leverage existing compliance — If your suppliers already provide REACH declarations, OEKO-TEX certificates, or GRS/RCS certifications, that data is a starting point for DPP.
  5. Standardize your data requests — Create a single supplier data questionnaire covering material composition, manufacturing location, and chemical compliance. Use a spreadsheet if needed — the goal is consistency, not technology.

The textile delegated act is expected in Q2 2027. If you wait until it publishes to start collecting supply chain data, you will have roughly 18 months to go from zero data to full compliance. Brands that start now will have a two-year head start. The exact data fields may change, but material composition, country of manufacture, and chemical compliance are near-certain requirements.

Phase 2: Expansion (Q2 2027 — Compliance Deadline)

Goal: Extend data collection to all products and deeper into the supply chain.

Once the textile delegated act publishes (expected Q2 2027), you will finally know the exact data fields required. This phase shifts from exploratory data gathering to systematic compliance. You need to move from covering your top SKUs to covering your entire product range, and from working with just Tier 1 factories to reaching your fabric suppliers and, where possible, your yarn and fiber suppliers. This is also when you should move away from email-and-spreadsheet workflows — the volume of data across all products and suppliers makes manual processes unsustainable.

Actions:

  1. Respond to the delegated act — When it publishes, map every required data field to a specific supplier in your chain
  2. Roll out to all SKUs — Extend data collection from top products to your full range
  3. Engage Tier 2 suppliers — Work with your fabric suppliers to get upstream data (fiber origin, spinning mill details)
  4. Implement digital data exchange — Move from spreadsheets to structured data formats (CSV at minimum, API integration if your platform supports it)
  5. Validate and verify — Cross-check supplier declarations against certifications and testing results

Phase 3: Full Compliance (Compliance Deadline Onward)

Goal: Maintain ongoing data quality for all products.

By this stage, DPP data collection should be embedded in your operations — not a standalone compliance project. Every new product development brief should include DPP data requirements from the start. Every new supplier onboarding should include data-sharing expectations in the contract. The focus shifts from initial data collection to ongoing data maintenance: updating DPPs when materials change, re-verifying supplier declarations annually, and preparing for the deeper traceability requirements the Commission will roll out in 2030 and 2033.

Actions:

  1. Integrate DPP data into product development — New products should collect DPP data as part of the design process, not as an afterthought
  2. Automate where possible — Connect your DPP platform to supplier data systems
  3. Prepare for deeper traceability — The preparatory study proposes phased traceability expansion (detailed supply chain data by 2030, full chain by 2033)

How Can You Make DPP Data Collection Easier for Suppliers?

The brands that succeed at supply chain data collection will be the ones that minimize the burden on suppliers. Here is what works:

Provide Templates, Not Requirements Lists

Do not send suppliers a 50-field data request with no context. The single biggest mistake brands make is sending a long requirements document and expecting the supplier to figure out what to do with it. Instead, create ready-to-fill templates that pre-populate every field you already know (product name, order number, your brand details) so the supplier only has to fill in what they uniquely know. Include a completed example so they can see exactly what a finished submission looks like. This one step — giving templates instead of requirements — can cut supplier response time in half.

  • A pre-filled template with fields you already know (product name, your order number)
  • Clear instructions for each field (what data, in what format, from what source)
  • Examples of completed forms
  • Translations in the supplier's language

Align with Industry Standards

Your suppliers are likely already producing compliance data for other customers and other regulations — do not ask them to reinvent the wheel. If a factory already fills out a Higg FEM assessment, that data covers energy, water, and chemical management fields that map directly to DPP environmental requirements. If they hold an OEKO-TEX Standard 100 certificate, that already addresses substances of concern. By aligning your data requests with frameworks suppliers already use, you reduce their workload and get higher-quality responses because the data has already been verified through an established process.

  • Higg FEM/FSLM — Many factories already report environmental and social data through the Higg Index
  • ZDHC MRSL — Chemical compliance data in a widely adopted format
  • GRS/RCS certifications — Recycled content verification that maps directly to DPP requirements
  • OEKO-TEX — Substance safety testing that covers DPP chemical compliance fields

Consolidate Requests

If you buy multiple products from the same factory, consolidate your data requests. One request covering all products is better than a separate request per style.

Share the Regulatory Context

Suppliers respond better to "the EU requires this from everyone" than to "we need this from you." Share:

  • A brief summary of the ESPR and DPP requirements
  • The timeline for textile compliance
  • The fact that all brands selling into the EU will eventually need this data — not just you

Offer to Help with Costs

For critical suppliers, consider:

  • Covering the cost of initial data digitization
  • Paying for third-party testing (REACH compliance, durability testing)
  • Investing in shared data infrastructure that benefits both parties

What Is the Regulatory Timeline for Supply Chain Traceability?

The December 2025 textile preparatory study (commissioned under Regulation (EU) 2024/1781, Article 4) proposes a three-phase approach to supply chain traceability. This is a proposal, not a final requirement — the actual timeline will be set in the textile delegated act. But it reflects the Commission's thinking about how fast they can realistically push the industry toward full traceability, and it is the best planning reference available today:

PhaseTimelineScopeWhat It Means
Phase 12027 (at delegated act adoption)Key manufacturing processes and production locationsYou need to know where your products are made and what processes are used
Phase 22030Expanded details per production stage with confidentiality controlsDetailed data on each supply chain stage, with access restrictions for sensitive information
Phase 32033Complete documented supply chain with controlled accessFull traceability from raw material to finished product

This phased approach acknowledges reality: full supply chain traceability is years away for most brands. Phase 1 is achievable now. Phase 2 requires investment. Phase 3 requires industry-wide infrastructure that does not yet exist.

For more context on the challenges small brands face in meeting these requirements, see our challenges guide.

What This Costs

Supply chain data collection costs vary dramatically depending on your starting point. The estimates below come from industry consultations referenced in the December 2025 textile preparatory study and reflect first-year costs for a small brand (under 250 employees) with a product range of 50–200 SKUs. Brands with more complex supply chains or more product categories should expect costs toward the upper end of each range. These figures cover labor, testing, and supplier engagement — they do not include DPP platform or technology costs, which are separate:

Starting PointEstimated Additional CostWhy
Brand with existing sustainability program (REACH, Higg, OEKO-TEX)2,000–5,000 EURGap-fill: extend existing data to cover DPP fields
Brand with basic supplier documentation5,000–15,000 EURDigitization + supplier engagement + some third-party testing
Brand with minimal supply chain visibility15,000–40,000 EURFull supply chain mapping + data collection from scratch + testing

These are first-year costs. Ongoing costs are lower once data collection processes are established. See our DPP compliance cost breakdown for the full picture.

The key insight: the biggest cost is labor, not technology. Emailing suppliers, following up, translating requests, validating responses, and resolving discrepancies takes time. Start early so this work is spread over months, not compressed into weeks.

Not sure where your biggest gaps are? Take our DPP Readiness Assessment — it identifies which supply chain data categories need the most attention for your specific product type.

Frequently Asked Questions

What if my supplier refuses to share data?

Start with a conversation, not an ultimatum. Share the regulatory context (this is an EU requirement, not your preference). If a supplier cannot or will not provide required data, you have options: work with them to build capability, switch to a supplier who can provide the data, or use third-party testing to verify claims independently. Long-term, suppliers who cannot provide DPP data will lose EU-market customers.

Do I need data from every supplier in my chain?

Not immediately. Phase 1 traceability (expected at delegated act adoption) requires key processes and production locations — primarily your Tier 1 manufacturer and fabric supplier. Full supply chain traceability (raw material to finished product) is not expected until Phase 3 (~2033).

Can I use estimated data instead of verified data?

For some fields, yes — initially. Carbon footprint calculations, for example, often use industry-average data when product-specific data is unavailable. However, the DPP will require disclosure of the methodology used, and as the regulation matures, expectations for verified data will increase. Start with what you have and improve over time.

What format should supplier data be in?

For now, a structured spreadsheet (CSV or Excel) is sufficient. When the CEN/CENELEC harmonized standards are published (expected March 2026), standardized data exchange formats will be defined. Long-term, the expectation is JSON-LD data exchanged via APIs, but that level of sophistication is not required initially.

Is there a standard supplier questionnaire for DPP data?

Not yet. Industry bodies (including EURATEX and GS1) are working on standardized data exchange templates through the CIRPASS-2 project. Until those are published, create your own based on the expected DPP data categories. Our data requirements guide covers every expected field.

dpp
supply-chain
data-requirements
compliance
espr
small-brands

Related Articles